Evidence record / eve
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-09-21-eve-approval-integrity-three-ways-an-approval-could-authorize-the-wrong-thing-closed-in-window
Approval integrity: three ways an approval could authorize the wrong thing, closed in-window. Before 0.50.0, a human approving one of several visible
once() prompts could silently approve the rest. Before 0.44.1, a redeploy
with edited source could run a different tool under a parked approval. Before
0.52.2, input-scoped keys on dynamic tools degraded to tool-wide keys on
replay.
Channel: tagged-release. Half: defect. Date: 2026-08-22 to 2026-09-06.
Operator consequence: Upgrade to at least 0.52.2 if any tool uses once()
or input-scoped keys. If you ran 0.43 to 0.49 with once() gates and
concurrent approvals, review tool logs for calls that executed while their
card was still open.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-eve-approval-integrity-three-ways-an-approval-could-authorize-the-wrong-thing-closed-in-window
Profile citations
- Eve / claim / approval-integrity-once-keys
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact